Exercises

In the following exercises, you apply what you’ve learned in this chapter. The answers for the exercises are located in the Answers section at the end of this chapter. There is no answer for Exercise 6-2.

Exercise 6-1

As a planning exercise for an upcoming forensic investigation of the remnants on a confiscated hard disk drive, you must identify the amount of free space on the hard drive of a system, one of the two places where remnants can be found on a hard disk. Further, you must calculate the estimated number of remnants to be collected from the slack space on the disk. Perform these functions on a hard disk drive in your computer and identify the free space and slack space.

Exercise 6-2

Download the Helix3 .iso file (Helix2009R1.iso) ...

Get CISSP Training Kit now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.